Bug: https://bugs.launchpad.net/ubuntu/+source/apparmor/+bug/1010909
When evince opens a dvi file, it updates the user fonts using texlive commands in /usr/share/texlive/texmf-dist/web2c/ (or possibly /usr/share/texlive/texmf/web2c/ in older releases). This patch adjusts the sanitized_helper profile to allow these tools to run. Nominated for trunk and 2.9. Signed-off-by: Steve Beattie <[email protected]> --- profiles/apparmor.d/abstractions/ubuntu-helpers | 3 +++ 1 file changed, 3 insertions(+) Index: b/profiles/apparmor.d/abstractions/ubuntu-helpers =================================================================== --- a/profiles/apparmor.d/abstractions/ubuntu-helpers +++ b/profiles/apparmor.d/abstractions/ubuntu-helpers @@ -59,6 +59,9 @@ profile sanitized_helper { # permissions for /usr/share, but for now just do this. (LP: #972367) /usr/share/software-center/* Pixr, + # Allow exec of texlive font build scripts (LP: #1010909) + /usr/share/texlive/texmf{,-dist}/web2c/{,**/}* Pixr, + # While the chromium and chrome sandboxes are setuid root, they only link # in limited libraries so glibc's secure execution should be enough to not # require the santized_helper (ie, LD_PRELOAD will only use standard system -- Steve Beattie <[email protected]> http://NxNW.org/~steve/
signature.asc
Description: Digital signature
-- AppArmor mailing list [email protected] Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/apparmor
